CNNVD-202511-006 Information

CNNVD ID

CNNVD-202511-006

CVE-2025-36367

  • CNNVD Published: 2025-11-01

Description (Chinese)

IBM i是美国国际商业机器(IBM)公司的一套运行在IBM Power Systems和IBM PureSystems中的操作系统。 IBM i 7.2版本、7.3版本、7.4版本、7.5版本和7.6版本存在安全漏洞,该漏洞源于IBM i SQL服务授权检查无效,可能导致权限提升。

Description (English)

IBM i is an operating system operated by the United States International Business Machine (IBM) in IBM Power Systems and IBM SureSystems. IBM version 7.2, version 7.3, version 7.4, version 7.5 and version 7.6 contain a security loophole, which stems from the ineffectiveness of the IBM i SQL service authorization check, which may lead to an increase in privileges.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

国际商业机器

Published

2025-11-01

Last Modified

2026-02-24

References

https://www.ibm.com/support/pages/node/7249915 https://access.redhat.com/security/cve/cve-2025-36367 https://vigilance.fr/vulnerability/IBM-i-privilege-escalation-via-SQL-Services-48635

Patch

https://www.ibm.com/support/pages/node/7249915

Share on: